Please consider enabling OCSP stapling, DNSSEC, and/or DANE on *.reproducible-builds.org

2023-04-14 Thread John Scott
Hi, I realize the subject line is quite loaded, so let me break it down. OCSP stapling is the modern, privacy-friendly way to determine a certificate's revocation status. It incurs very little overhead on the server side. One can use curl to check if OCSP stapling is working, at least for

Re: Please review the draft for March's report

2021-04-06 Thread John Scott
On Mon, 2021-04-05 at 05:03 -0400, Chris Lamb wrote: > Please feel free and commit/push to drafts without the overhead of > sending patches or merge requests. > If you currently do not have access to the above repository, you can > request access by following the instructions at: >

JavaScript information for website

2020-07-25 Thread John Scott
I'm not subscribed, please keep me CC'd. I'm working on adding metadata to the JavaScript on reproducible-builds.org so software like LibreJS can know it's free and where the source code can be obtained. However, modernizr.min.js, popper.min.js, and run_prettify.js are minimized and don't say